Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: Zbbie0S+rLqJlJIzy1gVKoWoce2/AFUBGUecbtnvHfM=
Subject key identifier: 2A:1E:FB:0F:2A:D6:29:04:55:6E:4E:D1:BB:BE:48:EB:E6:8D:F9:32
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 019A24794791A5350BA546E84D907D8DE21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 0B63
Signing time: Mon 27 Oct 2025 07:01:59 +0000
Manifest this update: Mon 27 Oct 2025 07:01:59 +0000
Manifest next update: Tue 28 Oct 2025 07:01:59 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: G4s70//cz+xW+Dkp8Tv2bJksJGNLCykKXRkSOPnnmag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:47:91:a5:35:0b:a5:46:e8:4d:90:7d:8d:e2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Oct 27 07:01:59 2025 GMT
Not After : Oct 28 07:01:59 2025 GMT
Subject: CN=2a1efb0f2ad62904556e4ed1bbbe48ebe68df932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:06:60:33:3a:75:b2:9f:ec:a7:6c:5a:35:
b3:99:e0:0a:62:b1:84:cc:ff:1a:ca:37:43:28:be:
50:64:a5:97:d3:c1:67:9b:db:a4:95:72:87:5f:93:
98:cc:e7:dc:46:c7:c0:1f:63:3a:d0:16:09:bb:f1:
53:ad:3f:ef:94:77:74:21:82:92:88:1c:4f:83:bb:
ee:21:95:6d:9e:e9:92:1c:48:36:7c:e5:a8:f8:c8:
6a:86:47:02:e6:9b:07:7c:de:92:43:89:66:1e:38:
3c:ae:e1:2b:0b:8c:3d:68:63:aa:f0:62:fd:bb:93:
e0:7b:7b:68:9d:00:e9:c2:59:e7:7d:95:b4:93:a9:
f0:da:26:13:14:ec:53:8c:9a:5a:e4:2f:71:6b:d6:
50:ca:43:0d:f6:4a:a0:16:16:a0:b6:07:e7:ae:2b:
b8:3b:54:76:5d:fc:29:ca:6e:9d:5c:b6:64:43:fa:
38:64:98:55:ed:7f:d7:a3:ab:e8:6a:c7:0b:78:1d:
e2:2c:fe:e6:88:65:af:aa:03:11:8c:40:69:9b:ac:
25:4d:22:ef:3f:9e:da:e0:98:bc:20:df:8a:41:3b:
c1:2e:c8:83:61:6f:ac:00:44:3b:8e:85:9d:b5:e4:
fb:c0:bb:be:0f:90:30:2f:3c:24:cd:01:4e:72:48:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1E:FB:0F:2A:D6:29:04:55:6E:4E:D1:BB:BE:48:EB:E6:8D:F9:32
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:66:d5:95:3e:4c:5b:6e:64:e1:6e:a7:6c:46:1b:b6:bf:e8:
df:10:36:c4:1c:00:8e:14:a8:66:df:26:57:4d:8e:d4:dc:b7:
57:69:48:a7:c0:4f:9c:5f:d9:36:82:6b:1c:47:7e:da:38:1c:
88:0b:e9:41:8a:b9:26:a4:e3:26:cc:c4:c7:9a:33:76:58:36:
29:7b:98:97:68:12:61:08:9d:ba:0a:c2:91:8e:2e:94:69:ee:
56:74:10:90:1e:cc:d5:8e:72:fc:68:36:ed:e0:9c:75:5d:27:
45:52:e8:64:2e:6d:02:9a:a3:5b:27:d4:1d:17:06:26:e3:31:
b7:66:c8:99:58:3f:c7:67:88:50:d2:b6:fb:46:d4:a8:59:a2:
f6:1d:3d:e1:7b:12:c3:5f:eb:a9:69:a3:9e:e2:03:30:6f:7f:
80:46:74:9d:f6:97:ad:7d:de:55:ab:b9:59:31:5d:28:8e:8d:
b3:97:11:84:51:73:17:7c:8f:10:6d:2a:65:f6:e5:54:ab:d6:
fd:8b:76:8d:0d:a7:df:ff:cd:82:08:1a:3c:3a:48:b3:df:a1:
ef:d0:ea:fc:b4:70:2f:00:07:b1:9c:db:38:76:80:78:ef:86:
6a:5d:32:8d:e1:cb:30:fb:35:d0:8f:af:a8:5d:b1:4f:8e:b5:
b4:81:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:27 2025 by rpki-client